smartinstall

Documentation

Overview

Package smartinstall detects Cisco Smart Install protocol (port 4786).

Cisco Smart Install is a plug-and-play configuration protocol for Cisco switches. It is critically dangerous when exposed — an attacker can extract the running config (including credentials) or overwrite it entirely, without any authentication.

CVE-2018-0171: Remote code execution via Smart Install. CISA has published multiple advisories warning about exposed Smart Install.

Detection sends the standard 24-byte Smart Install probe and validates the 24-byte response per the Cisco-Talos smi_check specification.

Index

• Constants
• type SmartInstallPlugin
  • func (p *SmartInstallPlugin) Name() string
  • func (p *SmartInstallPlugin) PortPriority(port uint16) bool
  • func (p *SmartInstallPlugin) Priority() int
  • func (p *SmartInstallPlugin) Run(conn net.Conn, timeout time.Duration, target plugins.Target) (*plugins.Service, error)
  • func (p *SmartInstallPlugin) Type() plugins.Protocol

Constants

const (
	SMARTINSTALL = "smart-install"
	DefaultPort  = 4786
)

Types

type SmartInstallPlugin

type SmartInstallPlugin struct{}

func (*SmartInstallPlugin) Name

func (p *SmartInstallPlugin) Name() string

func (*SmartInstallPlugin) PortPriority

func (p *SmartInstallPlugin) PortPriority(port uint16) bool

func (*SmartInstallPlugin) Priority

func (p *SmartInstallPlugin) Priority() int

func (*SmartInstallPlugin) Run

func (p *SmartInstallPlugin) Run(conn net.Conn, timeout time.Duration, target plugins.Target) (*plugins.Service, error)

func (*SmartInstallPlugin) Type

func (p *SmartInstallPlugin) Type() plugins.Protocol